Security
How we protect your email
Email holds your contracts, invoices and customer conversations. Here is exactly how VoraMail keeps it safe, without vague promises.
Encryption
- All traffic to the web app and API uses HTTPS (TLS).
- Mailbox credentials are encrypted at rest with AES-256-GCM.
- Mail between servers uses TLS when the other server supports it.
Accounts and sessions
- Passwords are hashed with bcrypt; we never store them in plain text.
- Sessions use signed tokens in secure, HTTP-only, SameSite cookies.
- Password reset links are single-use and expire.
Domain protection
- Every domain must prove ownership with a unique TXT record.
- A domain can belong to only one account.
- System domains are reserved and can’t be claimed.
Email authentication
- Outgoing mail is DKIM-signed with a key generated for your domain.
- The setup wizard provides SPF and DMARC records.
- Domain health monitoring alerts you if records break.
Team access
- Teammates use their own logins; no shared passwords.
- Owners can remove members instantly.
- Internal notes are visible only to inbox members.
Infrastructure
- Hosted in the EU (Helsinki, Finland) on Hetzner.
- Services run in isolated containers on a private network.
- Payments are handled by Stripe; card data never touches our servers.
FAQ
Security questions
Is my email end-to-end encrypted?
No. Like most business email services, messages are encrypted in transit (TLS) but stored on our servers so you can read them from any device and so features like search and AI summaries can work. Mailbox credentials are encrypted at rest.
Do you read my email?
No. Your content is processed automatically to provide the service. AI features send a thread to our AI provider only when you click Summarize or AI reply.
Where is my data stored?
On servers in Helsinki, Finland (EU).
How do I report a security issue?
Please use our contact form and choose “Security”. We appreciate responsible disclosure and will respond promptly.
Your domain. Your inbox. Ready in minutes.
Start with one inbox for $6.99/month and add only what you need.